Overview of the regulation of financial institutions

Last updated November 20265 sectionsabout 5 min read

Key takeaways

Lending institutions are regulated to protect depositors and the public interest, keep the financial system stable, treat borrowers fairly and maintain confidence in the system.
Rules-based regulation sets detailed, specific rules such as CBK's numeric prudential ratios: predictable, but open to conduct that meets the letter of a rule and not its spirit.
Principles-based regulation sets broad principles that lenders apply with judgement, more flexible but less predictable in enforcement; risk-based supervision scales attention to each institution's actual risk profile.
Kenya has several regulators: CBK for commercial banks and digital credit providers, SASRA for deposit-taking SACCOs, the Microfinance Act framework for microfinance institutions, and the CMA for listed lenders' securities and governance disclosure.
Before applying any rules to a scenario, identify which regulator's framework it falls under.

Need and objectives of regulation of lending institutions

Protect depositors and the wider public interest
Maintain systemic financial stability, a single failed lender should not threaten the wider system
Ensure fair, non-discriminatory treatment of borrowers
Promote confidence in the financial system, without which savings and credit intermediation cannot function

History of regulation

Kenyan financial regulation has evolved from a narrower, largely bank-focused framework toward today's multi-regulator structure covering banks, SACCOs, microfinance institutions, insurance and capital markets separately, each shaped by lessons from past sector-specific crises, including periodic bank failures and, more recently, digital lending conduct concerns that prompted the CBK Digital Credit Providers Regulations.

Regulation models and strategies

Rules-based regulation

Detailed, specific rules lenders must follow, e.g. CBK's numeric prudential ratios, predictable but can be circumvented by conduct technically compliant with the letter but not the spirit of the rule.

Principles-based regulation

Broad principles (e.g. 'lend responsibly') lenders must apply judgement to satisfy, more flexible but less predictable in enforcement.

Risk-based supervision

Regulatory attention and intensity scaled to each institution's actual risk profile, rather than uniform treatment of every regulated entity.

The role of regulatory models

Kenya's actual practice blends these models, CBK combines detailed prudential ratios (rules-based) with broader risk-based supervisory engagement, particularly for systemically significant banks, reflecting that no single model alone captures every regulatory objective this chapter opened with.

Regulatory authorities and their structures

Central Bank of Kenya (CBK)

Regulates commercial banks, and, since dedicated regulations were introduced, digital credit providers.

SACCO Societies Regulatory Authority (SASRA)

Regulates deposit-taking SACCOs (DTS), covered in the chapter on cooperative and sacco lending regulations.

Microfinance regulators under the Microfinance Act

Oversee microfinance banks and credit-only microfinance institutions (see the chapter on microfinance lending regulations).

Capital Markets Authority (CMA)

Regulates listed lenders' securities and governance disclosure (see the chapter on corporate governance in lending institutions).

Exam tip

The multi-regulator structure above is the paper's organising fact, each sector chapter that follows maps to exactly one of these regulators' own specific rulebook, always identify which regulator's framework a scenario falls under before applying the wrong chapter's rules.

Self-check

(a) State four objectives of regulating lending institutions. (4 marks)

(b) Distinguish between rules-based and principles-based regulation, identifying one advantage and one disadvantage of each. (5 marks)

(c) A microfinance bank, a deposit-taking SACCO, and a digital-only credit-only lender each need to identify their primary regulator. Identify the correct regulator for each. (3 marks)

(d) Explain risk-based supervision and how it differs from applying uniform regulatory intensity to every institution. (4 marks)

Show worked answer

(a) Protecting depositors and the wider public interest; maintaining systemic financial stability so that a single failed lender does not threaten the wider system; ensuring fair, non-discriminatory treatment of borrowers; and promoting confidence in the financial system, without which savings and credit intermediation cannot function. (4 marks)

(b) Rules-based regulation sets detailed, specific rules lenders must follow, e.g. CBK's numeric prudential ratios; it is predictable but can be circumvented by conduct that is technically compliant with the letter but not the spirit of the rule. Principles-based regulation sets broad principles (e.g. 'lend responsibly') lenders must apply judgement to satisfy; it is more flexible and adaptable to new situations, but less predictable in how it will be enforced in a specific case. (5 marks)

(c) The microfinance bank is regulated by the Central Bank of Kenya under the Microfinance Act; the deposit-taking SACCO is regulated by the SACCO Societies Regulatory Authority (SASRA); the digital-only credit-only lender falls under the Central Bank of Kenya as a digital credit provider under the CBK Digital Credit Providers Regulations. (3 marks)

(d) Risk-based supervision scales regulatory attention and intensity to each institution's actual risk profile, a large, complex, systemically significant bank receives more intensive, frequent supervisory engagement than a small, simple, low-risk institution. This differs from uniform treatment, which would apply the same supervisory intensity regardless of an institution's actual risk, wasting supervisory resource on low-risk institutions while potentially under-supervising genuinely higher-risk ones. (4 marks)